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We introduce a new criterion, replacement freeness, to discern the relative expressiveness of process 
calculi. Intuitively, a calculus is strongly replacement free if replacing, within an enclosing context, a 
process that cannot perform any visible action by an arbitrary process never inhibits the capability of 
the resulting process to perform a visible action. We prove that there exists no compositional and in- 
teraction sensitive encoding of a not strongly replacement free calculus into any strongly replacement 
free one. We then define a weaker version of replacement freeness, by only considering replacement 
of closed processes, and prove that, if we additionally require the encoding to preserve name inde- 
pendence, it is not even possible to encode a non replacement free calculus into a weakly replacement 
free one. As a consequence of our encodability results, we get that many calculi equipped with pri- 
ority are not replacement free and hence are not encodable into mainstream calculi like CCS and 
^-calculus, that instead are strongly replacement free. We also prove that variants of ^-calculus with 
match among names, pattern matching or polyadic synchronization are only weakly replacement 
free, hence they are separated both from process calculi with priority and from mainstream calculi. 



1 Introduction 



The field of process calculi has been sometimes compared to a 'jungle' of interrelated but separate 
theories ||23ll26ll , made of plenty of calculi, each one with its own set of concepts, operators, semantics 
and results. With the aim of turning this jungle into a 'nicely organized garden', many authors have 
tackled the challenge of devising suitable criteria to classify the different calculi. Relative expressiveness 
has been then advocated as a valid perspective from which two calculi can be compared. A standard 
approach is to define a 'proper' encoding of a calculus into another one, i.e. a function mapping terms 
of the source calculus into terms of the target one that is required to preserve and/or reflect 'reasonably' 
much of the semantics of the source language and to be structurally defined over its operators. The target 
calculus is then considered at least as expressive as the source one. Alternatively, one can prove a sort of 
separation result stating that no such encoding exists, thus telling the two calculi apart. 

This is an effective approach, but there is no common agreement on which class of encodings has to 
be used. Several different classes have been introduced (see, e.g., Ol8llBlirafl31l26ll27ll3ll33llT3ll'). 
each one being characterised by the syntactic and semantic properties that the encodings are required to 
satisfy. Appropriateness of a class depends however from the kind of results one is seeking. Encodings 
are better, in the sense that they attest that the target calculus has expressive power tighter to that of 
the source calculus, when satisfying as many properties as possible. Conversely, separation results are 
stronger and more informative when relying on encodings with minimal requirements. 

In this paper we introduce a few criteria and classes of encodings for separating process calculi, and 
illustrate some results of their application. In particular, we separate extensions of 7r-calculus from the 
core calculus and calculi with priority mechanisms from the others. 

Since our focus is on separating process calculi, to get more general results we rely on a minimal set 
of requirements taken from the literature. The starting point of our investigation are the reasonable en- 
codings, introduced in [ 15] for comparing several communication primitives in the context of 7r-calculus, 



S. Froschle, F.D. Valencia (Eds.): Workshop on 
Expressiveness in Concurrency 2010 (EXPRESS' 10). 
EPTCS 41, 2010, pp. 16430] doi: 10.4204/EPTCS.41.2| 



© F. Banti, R. Pugliese & F. Tiezzi 
This work is licensed under the 
Creative Commons Attribution License. 



F. Banti, R. Pugliese & F. Tiezzi 



17 



non strongly rep-free 



basic 






strongly rep-free 



encodings 



weakly rep-free 



independence 
preserving 



non rep-free 





basic 
encodings 




rep-free 



Figure 1 : Calculi partition 



We further generalise this already broad class of encodings by dropping the requirements about name 
invariance, operational correspondence, and divergence preservation and reflection. Thus, we get the 
class of basic encodings, i.e. encodings that only require the two basic properties that, in our opinion, 
any encoding should satisfy: compositionality (i.e. the encoding of a compound term is defined by com- 
bining the encodings of its sub-terms) and interaction sensitiveness (i.e. the capability to interact with 
the context through visible actions is preserved and reflected). 

We first introduce a new criterion for separating process calculi, named replacement freeness. In- 
tuitively, a calculus is strongly replacement free {strongly rep-free, for short) if replacing, within an 
enclosing context, an 'invisible' process (i.e. a process that cannot perform any visible action) by an 
arbitrary process never inhibits the capability of the resulting process to perform a visible action. We 
then prove that there exist no basic encodings of non strongly rep-free calculi into strongly rep-free ones. 
Of course, a similar result also holds for reasonable encodings, since they are basic encodings too. 

Intuitively, invisible processes cannot explicitly interact with the enclosing context since they do not 
perform visible actions (at most, they can only perform 'internal' computation steps). Nevertheless, their 
behaviour could be implicitly affected by the enclosing context through the generation of substitutions 
involving the free names of the invisible processes. To prevent also this kind of influence, we will 
consider the subclass of invisible processes that are closed (i.e. contain no free name) and use it to 
weaken the condition of replacement freeness. A calculus is hence deemed replacement free {rep-free, 
for short) if replacing, within an enclosing context, a closed invisible process by an arbitrary process 
never inhibits the capability of the resulting process to perform visible actions. Of course any strongly 
rep-free calculus is also rep-free; we will show that the converse does not hold. We will call weakly rep- 
free those rep-free calculi that are not strongly rep-free. Since the processes which we now focus on share 
no free names, we limit ourselves to only consider the subclass of basic encodings that preserve name 
independence ll25ll28l (i.e. if two processes share no free names the same holds for their encodings). We 
will prove that there exist no such encodings of non rep-free calculi into (even weakly) rep-free calculi. 
In the end, we obtain a de facto tripartition of process calculi into three sets, i.e. strongly rep-free, weakly 
rep-free, and non rep-free calculi, which are respectively separated by basic encodings and independence 
preserving basic encodings (as shown in Figure [TV 

Then, we will present several results, arising from the exploitation of our criteria, about the relative 
expressiveness of well-known process calculi. We first prove that some mainstream process calculi, like 
CCS [20] and 7i-calculus J2TJ, are strongly rep-free. Conversely, most of the calculi with some form of 
priority that have been proposed in the literature (e.g. those in ffl|27l[TT][T9]]), are not rep-free and thus 
cannot be 'properly' encoded into CCS or 7r-calculus. Intuitively, when replacing an invisible process 
with one performing prioritized actions, replacement freeness can be violated because the additional 
initial actions at disposal of the replacing process may prevent some actions with lower priority that 
might originally be performed. However, this turns out not to be the only source of possible violations 
of replacement freeness. Indeed, we also show that variants of 7r-calculus equipped with, respectively, 
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match among names ETTl . polyadic synchronization ||8l or pattern matching |[T5l are weakly rep-free 
and thus are strictly more expressive than the 'classical' 7r-calculus. This allows us to prove in a quite 
simple and uniform way possibly stronger versions of the results obtained in E71 [8] [16j [15j [33j . As 
concerns these calculi, strong replacement freeness is violated because a process originally invisible can 
be transformed into a visible one via application of a name substitution (generated by the enclosing 
context) which originates a new computation. The reason for this class of violations is clearly different 
from the previously discussed one and, in fact, if only closed invisible processes are taken into account, 
these violations do not arise. Thus, the above mentioned richer variants of 71-calculus are only weakly 
rep-free. Anyway, they cannot encode non rep-free calculi like those with priority herein analyzed. 

The rest of the paper is structured as follows. Section[2]introduces the replacement freeness criterion, 
both in its stronger and in its weaker formulation, and the classes of basic and independence preserving 
encodings we exploit; it also presents our general separation results. Section [3] proves that CCS and %- 
calculus are strongly rep-free, Section|4]proves that some variants of 71-calculus are only weakly rep-free, 
and Section |5]proves that several calculi with priority are not (even weakly) rep-free. Finally, Section [6] 
draws a few conclusions and reviews some strictly related work. We refer the interested reader to for 
a full account of the proofs and for a wider comparison with related work. 

2 Replacement freeness: a separation criterion 

Conceptually speaking, our approach relies on some properties of process calculi that are invariant un- 
der certain classes of encodings, so that, if an encoding violates one such invariant, it cannot belong to 
the intended class. Strong replacement freeness, or, to be precise, its negation, is an invariant for basic 
encodings, as well as negation of replacement freeness is an invariant for independence preserving basic 
encodings. From the quite simple concepts and results presented in this section it follows a powerful 
methodology for separating process calculi: non strongly rep-free calculi cannot be encoded through ba- 
sic encodings into strongly rep-free calculi; furthermore, non rep-free calculi cannot be encoded through 
independence preserving basic encodings into (possibly weakly) rep-free calculi. In the next sections, 
we present several results about the relative expressiveness of well-known process calculi arising from 
the exploitation of our methodology. 

2.1 Background notations 

Process calculi are formal languages allowing to constructs operational models of open computing sys- 
tems and to specify interactions between systems. They provide different sets of operators for composing 
terms, called processes, as well as different sets of (atomic) actions, typically representing inputs and 
outputs along communication channels, that processes can perform. 

Actions are ranged over by ju, jti', jUi, . . . and may be either visible (we use a, a',/3, . . . to range over 
them) or invisible (in which case they are indistinguishable and usually denoted only by t). Specifically, 
actions are expressed in terms of names, i.e. basic entities without structure, ranged over by letters a, 

b, . . . , x, y, . . . , n, m, To define and delimit the scope of names, process calculi are equipped with 

name-binding operators. An occurrence of a name in a process is bound if it is, or it lies within the scope 
of, a binding occurrence of the name. An occurrence of a name in a process is free if it is not bound. We 
write f n(P) for the set of names that have a free occurrence in P. A process P is closed if f n(P) = 0. 

For any given process calculus, we need a notion of context where a term of the calculus can be placed 
for execution. Although we will usually deal with contexts with a single hole, we need to introduce the 
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more general notion of k-hole context. 

Definition 2.1 (&-hole context) A &-hole context, with k>\, is a term of the calculus where k sub-terms 
are replaced by the holes _ v . If C is a k-hole context then we write C\P\ , . . . ,/\] fo r the term 

obtained by replacing _. in C by Pi, for i G [1 . .k\. We also write _ in place of _ t for l-hole contexts. 

We shall use C, Ci, C2, ■ ■ .to range over process calculi. When convenient, we shall regard a calculus 
as a set of processes, contexts and operators, writing e.g. PeCto mean that P is an element of C. 

We assume that the operational semantics of process calculi is defined by means of labelled transition 
systems. Transitions labelled by invisible actions correspond to computation steps and can be thought of 
as taking place of 'internal' interactions of systems, whereas transitions labelled by visible actions can 
be thought of as representing only 'potential' computation steps, since in order for them to occur they 

require a contribution from the environment. As usual, we will write P -^—?~ P' to indicate that the process 

P can do a transition labelled jj, and become the process P 1 in doing so. We let =>• to denote the reflexive 

and transitive closure of >•, ===> to denote =>-^- (the juxtaposition of two relations indicates 

fin n 
their composition), and ==>■ to denote =>, if fx = T, and =>, otherwise. Moreover, we will write >u 

to denote the composition of > with itself &-times (similarly for the other transition relations). 
Now, by exploiting the relations above, we define the following predicates over processes. 

Definition 2.2 (Process predicates) Let P be a process. 

• P ij-a, i-e. P can perform the (visible) action a, ifP ==4> P' for some P'; 

• P JJ-, i.e. P is visible, if there exists a visible action a such that P Jj- a ; 

• P i.e. P is invisible, if there exists no visible action a such that P i}- a . 

Predicate ij. a accounts for the ability of processes of interacting with their environment. Notably, an 
invisible process either is stuck or can only perform invisible actions. Clearly, if P is invisible, then it 
can only evolve to invisible processes. 

Our results also hold for process calculi whose operational semantics is defined by means of reduc- 
tion relations. In this case, predicate Jj- a is defined by induction on the syntax of processes. 

2.2 Basic encodings and strong replacement freeness 

Basic encodings take their appellation from the basic properties they are required to satisfy. The first 
requirement regards the 'structure' of the source calculus: an encoding must be compositional, i.e. every 
fc-ary operator op of the source calculus is translated into a &-hole context C of the target calculus and the 
application of op to k processes is encoded into the application of C to the encodings of such processes. 
The second requirement regards the 'semantics' of the source calculus: an encoding must be interaction 
sensitive, i.e. it must preserve and reflect the capability of a process to perform, or not, visible actions 
(possibly after some internal computation steps). 

Definition 2.3 (Basic encodings) An encoding [[•]] ofC\ into C2 is basic if 

• [[•]] is compositional: for every k-ary operator op G Ci there is a k-hole context C op £ C2 such 
that\JP u ...,P k G d, lop{P u ...,P k )\=C op [m,...M}. 

• [[•]] is interaction sensitive: for every process P G Ci, P J| if and only if [[P]] JJ-. 

Notice that the property of being an invisible process is an invariant under basic encodings, since by 
definition such encodings preserve and reflect processes interaction ability. 



20 



A criterion for separating process calculi 



Proposition 2.1 Let [[•]] be a basic encoding of Ci into C2 and P G Ci. T/zen P$if, and only if, [[P]] ^. 

By using a basic encoding (in fact, a compositional one would suffice), one can encode not only 
single operators but also arbitrary contexts. In other words, any context in Ci can be represented as a 
context in C2. We state this property for 1-hole contexts only, but it could be easily generalised. 

Lemma 2.1 Let [[•]] be a basic encoding of Ci into C2. Then, for every context C\ G Ci, there exists a 
context C2 G C2 such that, for every process P G Ci, [[Ci [P]]] = C2 [[[P]]] . 

Proof (sketch). By induction on the structure of Ci . □ 

A strongly rep-free calculus is a calculus for which, the replacement within a context of an invisible 
process with any other one, never inhibits the capability of executing a visible action. 

Definition 2.4 (Strong replacement freeness) A calculus C is strongly replacement free ( strongly rep- 
free, for short) if for every context C, invisible process I and process P in C, 

C[I]ty implies C[P]ty (1) 
A calculus is not strongly rep-free if there exists a triple C, / and P violating the condition ([TJ. 

Example 2.1 Consider n-calculus with the match operator [x = y]P, which allows a process to test 
if the names x and y coincide and to continue its execution as P only if the test succeeds ( see also 
Section^. This calculus is not strongly rep-free, because of the following triple: C = (vx)(x(a)._ | xb), 
I = [a = b]yc and P = 0. Process I is invisible since it is blocked by an unsatisfied match ( as names a and 

b are supposed to be different). However, we have that C[I] Jj, since C[I] = (vx) (x(a) . [a = b]yc \ xb) — — > 

(vx)([b = b]yc I 0) yc > (vx)(0 | 0). Instead, C[P] $ because C[P] can only perform the transition 

C[P] = (vx)(x(a) I xb) — — > (vx)(0 I 0) and become stuck in doing so. 

The proof of the following separation result is based on showing that the property of being a non 
strongly rep-free calculus is invariant under basic encodings. 

Theorem 2.1 There is no basic encoding from a non strongly rep-free to a strongly rep-free calculus. 

Proof. Let Ci and C2 be two process calculi, let C2 be strongly rep-free and Ci be not. Let us assume 
that [[•]] is a basic encoding of Ci into C2. Let C, / and P in Ci be such that C[I] J| and C[P] such a 



triple exists since Ci is not strongly rep-free. By Proposition |2.1| [[/]] is invisible. By Lemma 2.1 for 



some context C of C2, we have [[C[I]]] = C [[[/]]] and [[C[P]]] = C [[[/>]]]. Thus, by interaction sensitiveness 



and Proposition 2.1 C' [[[/]]] 4- and C'[[P]|] $ against the initial assumption that C2 is strongly rep-free. □ 



2.3 Independence preserving basic encodings and replacement freeness 

The set of process calculi violating strong replacement freeness is indeed quite large and can be further 
split into two distinct sets. One set comprises calculi for which an invisible process / may be transformed 
into a visible one by application of a substitution a (i.e. a function on names). As shown in Section[4| this 
happens for calculi exploiting such operators as, e.g., match among names, polyadic synchronization, or 
pattern matching. The other set includes, at least, those calculi exploiting some form of priority, as shown 
in Section [5] It is possible to formally separate these two sets of calculi by defining a weaker version 
of replacement freeness based on the subset of invisible processes that are also closed, i.e. without free 
names, and hence impervious to substitutions. Intuitively, there is no way for the enclosing context to 
affect the behaviour of closed invisible processes. We will thus show that the valiants of 7r-calculus 
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presented in Section [4] turn out to be (weakly) rep-free, but not strongly rep-free. Instead, the process 
calculi with priority presented in Section [5] are not (even weakly) rep-free. To prove separation of these 
two sets of calculi we only consider those basic encodings that also preserve name independence ||25ll28ll , 
i.e. guarantee that if two processes do not share free names, the same holds for their encodings. 

Definition 2.5 (Name independence) Two processes P and Q are independent if fn(P) n fn(<2) = 0- 
An encoding [[•]] of Ci into C2 is independence preserving if whenever processes P and Q in C\ are 
independent, then JP]] and [[2]] in C2 are independent too. 

Since closed processes have no free names and substitutions only apply to free names, we get that if 
P is a closed process, then Pa = P, for any substitution a. Similarly, if / is a closed invisible process, 
then la is a closed invisible process too. Moreover, we can show that the property of a process to be 
closed is invariant under independence preserving encodings. 

Lemma 2.2 Let [[•]] be an independence preserving encoding ofC\ into C2 and let P £ Ci be a closed 
process. Then JP]] G C2 is closed too. 

Proof. By contradiction, let P be a closed process such that [P] is not closed. Then, by definition of 



closed process (Definition 2.5 1, we would get that f n(P) = and, hence, f n(P) n f n(P) = 0. Similarly, 
we would get that fn([[P]]) ^ and, hence, f n([[P]]) n fn([[P]]) / 0. Therefore, we would obtain that 
processes P and P would be independent while [[P]] and [[P]] would not be, against the hypothesis that the 
encoding [[•]] is independence preserving. □ 

The weak version of replacement freeness is defined by imposing condition ([T]) on triples C, / and P, 
where / is a closed invisible process. 

Definition 2.6 (Replacement freeness) A calculus C is replacement free (rep-free, for short) if for every 
context C, closed invisible process I and process P in C, 

C[/]J| implies C[P]ty (2) 

A calculus that is rep-free, but not strongly rep-free is called weakly rep-free. 

Example 2.2 Consider CCS sg , an extension of CCS where channels have priority levels and only com- 
plementary actions at the same level of priority can synchronise (see Section^for more details). We 
consider here just two priority levels, ordinary actions and higher priority, underlined actions, so that 
ordinary actions are preempted by taking place of synchronization between high-priority actions. CCS sg 
is not rep-free because of the following triple: C = (a | _)\{a} +b, 1 = and P = a. In fact, we have 

that C[I] Jj, because C[I] = (a | 0)\{a} +b — ► 0, while C[P] since process C[P] can only perform the 
transition C[P] = (a | a)\{a} +b ^—t (0 | 0)\{a} and become stuck in doing so. 

Of course, every strongly rep-free calculus is also rep-free and every non rep-free calculus is also 
not strongly rep-free (see Figure [T]). Finally, it is possible to obtain the analogous separation result of 



Theorem 2. 1 for rep-free calculi by further requiring the basic encodings to be independence preserving. 



Theorem 2.2 There is no independence preserving basic encoding from a non rep-free to a rep-free 
calculus. 



Proof. The proof proceeds like that of Theorem 2.1 but exploiting the hypothesis that / is closed and 
that the property of being closed is invariant under independence preserving encodings (Lemma 2.2 1. □ 



22 



A criterion for separating process calculi 



3 Proving strong replacement freeness of mainstream calculi 

In this section we prove that the two well-known process calculi CCS and 7T-calculus are strongly rep- 
free. We do this by defining a family of relations =4 k for k < CO (where CO is the first infinite ordinal) and 
using them for proving, by induction on k, that, both for CCS and 7r-calculus, it holds that C[I] C[P], 



for every context C, invisible process / and process P. Proposition 3.1 will then allow us to conclude. 

Definition 3.1 (co-simulation) 

1. =4° is the universal relation on processes. 

2. For 1 < k < CO, =4 k is defined by: 

Q4 k Pif, whenever Q Q', then, for some P', P =^4> P' and Q P'. 

3. Relation Q =4 W P (also referred as CD-simulation) holds if Q ^ k P for every k. If Q ^ a P then we 
say that P is an co-simulation of Q or that P co-simulates Q. 

Intuitively, if P co-simulates Q, then P can perform at least the same visible actions that Q can 
perform, possibly preceded and followed by invisible actions, and the same holds for their derivatives. 

The above relations resemble the 'stratification' of weak bisimulation for 7r-calculus [30, page 99]. 
However, our relations are not symmetric and are used as a viable technique for proving that CCS and %- 
calculus are strongly rep-free, rather than to capture observational equivalences among processes. Given 
the results in ll20l [301 about the stratification of weak bisimulation, we can also presume that, in CCS 
and 7r-calculus, =^ ffl coincides with the standard simulation preorder. 

The following proposition states that C[I] =^ ffl C[P] implies conditions ([!]) of Definition 2.4 and (|2]) of 



Definition 2.6 It then provides a technique for proving (strongly) replacement freeness, not an alternative 
characterization. In fact, condition C[I] =^ ffl C[P] is stronger than that requested in the (strongly) rep-free 
definition, since the former requires that if C[I] performs a visible action then C[P] must perform the 
same action, while the latter only requires that C[P] is able to perform some visible action. 

Proposition 3.1 (co-simulations & replacement freeness) Let C be a process calculus. 

1. If, for every context C, invisible process I and process P, it holds that C[I] =4® C[P] then C is a 
strongly rep-free calculus. 

2. If, for every context C, closed invisible process I and process P, it holds that C[I] C[P] then C 
is a rep-free calculus. 

Proof. We only prove the thesis for case 1 as the other case is similar. Let P, I and C be a triple such 
that C[I] 4 m C[P] and C[I\ Jj.. To prove that C is strongly rep-free, we must show that C[P] Jj.. In fact, 
C[I] ij- means that C[I] J| a for some visible action a. Hence, for some m > and processes Q' and Q", 



C[I] Q' -^U Q". Since C[I] 4 W C[P] implies, in particular, that C[I] 4 m+1 C[P], then, by applying 



3.1 



m + 1 times Definition 
and the thesis is proved. □ 



we get that C[P] =^ m R' =^ R" for some processes R' and R" . Hence, C[P] 4| 



CCS is strongly replacement free. To prove that CCS is strongly rep-free (Theorem 3. 1 ), by Proposi- 
3.1 1), it suffices to show that =^ ffl is a pre-congruence for CCS. 



tion 



Proposition 3.2 Relation =4 m is a pre-congruence for CCS. 

Proof (sketch ). First, for each operator of finite CCS, it is proven by induction on k that is preserved 
for every k. Then, it is proven that =<! m is preserved by recursive definitions by following the same strategy 
adopted in [20] for proving that strong bisimulation is preserved by recursive definitions. □ 



F. Banti, R. Pugliese & F. Tiezzi 



23 



Theorem 3.1 CCS is strongly rep-free. 



Proof. Let C be a context, / be an invisible process, and P be a process. Since / =^ ffl P, by Proposition 3.2 



we get that C[I] 4 m C[P}. Then, the thesis follows by Proposition 3.1 1). □ 



71-calculus is strongly replacement free. To prove that 7r-calculus is a strongly rep-free calculus (The 
orem 



3.2 1, we proceed as for CCS. However, the co-simulation relation results to be a pre-congruence 
w.r.t. all the operators of TT-calculus but for the input prefix. This happens because, intuitively, execution 
of an input action can generate a substitution that identifies names that were originally different. As 
a consequence of the application of this substitution to the continuation process, new transitions could 
arise because communications that were originally impossible become enabled, thus the expansion of 
parallel composition in terms of choice and prefix becomes unsound. 

Another difference with the previous section is the proof technique used. Indeed, to prove that =^ ffl 
is preserved by all operators but input prefix, we exploit the fact that our ft)- simulation is strictly weaker 
than a well-known observational semantics for 7T-calculus, named weak bisimilarity |[2Tll30ll and denoted 
by This fact can be easily proved by relying on a family of relations ll30l Def. 2.4.24, page 99], that 
stratify the definition of weak bisimilarity and whose intersection m m is weaker than [30, Theorem 
2.4.27, page 100] but stronger than Indeed, for every k, we have ~fcC=<!* (it directly follows by 
definition since tt k is the greatest symmetric relation contained in and this implies that R^C^®. 
Therefore, for proving the following results about =^ ffl we can exploit all the laws that are sound for 
Although in general input prefix does not preserve < ffl , we can however prove, by induction on the 



structure of contexts, that the premises of Proposition |3.1|T) hold (Lemma 3.1 ) which suffices for our 



puiposes (Theorem 3.2 1. 



Lemma 3.1 For every context C, invisible process I and process P, it holds that C[I] =4 m C[P]. 
Theorem 3.2 n-calculus is strongly rep-free. 



Proof. Let C be a context, / be an invisible process, and P be a process. By Lemma 3. 1 we have that 



C[I] 4 a C[P]. Then, the thesis follows by Proposition 3.1 1). □ 



4 Weakly replacement free calculi 

In this section we deal with some calculi that are only weakly rep-free. Intuitively, for the calculi we 
consider, violation of strong replacement freeness is due to the introduction of one of three different 
mechanisms: match among names, polyadic synchronization and pattern matching. Among the many 
different process calculi that have adopted these mechanisms, for the sake of simplicity we analyze three 
known variants of TT-calculus. For each calculus we show that it is not strongly rep-free by exhibiting a 
triple made of a context C, an invisible process / and a process P such that condition ([TJ of Definition 2.4 



is violated. In all the exhibited contexts the hole is in the scope of an input prefix: thus, by means of an 
interaction, the context can generate a substitution whose application to the enclosed invisible process 
transforms it into a visible process by enabling a visible step that was originally blocked. Instead, if 
we restrain invisible processes only to those that are closed, the strategy sketched above does not apply 
anymore. To prove that the three calculi are weakly rep-free, instead of three separate proofs, we define 



a richer variant, called % MFM -calculus, incorporating them all and make the proof for it (Theorem 4. 1 1. 



TT-calculus with match. The match operator has been used in many presentation of TT-calculus, as 



e.g. in the original one [21 ]. The following result trivially follows from Example 2.1 
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Proposition 4.1 K-calculus with match operator is not strongly rep-free. 

TT-calculus with polyadic synchronization. This variant [ 8 ] enriches 7T-calculus by allowing to use 
tuples, i.e. sequences of names, denoted by (ai,a2, ■ ■ ■ ,a n ) or a, in addition to single names, for iden- 
tifying input and output channels. Thus, the syntax of input and output actions becomes a(x) and sin, 
respectively. The operational semantics is defined by rules similar to those of 71-calculus where subjects 
of input and output actions are tuples, allowing interaction to happen only when such tuples match. 

Proposition 4.2 K-calculus with polyadic synchronization is not strongly rep-free. 

Proof. Let C, / and P be as follows: C = (vjt)(jc(a)._ | xb), I = (vz)({z,a)d \ (z,b)(w).yc) and P = 0. 
Process / is invisible since synchronisation along channels (z,a) and (z,b) cannot take place (as names 
a and b are supposed to be different). However, we have that C[I] JJ-, in fact 

C[I] = (yx)(x(a).(yz)(Md \ (z,b)(w).yc) \xb) (v*)((vz)((z^)d | (z,b){w).yc) | 0) 
(vx)((vz)(0 | yc) | 0) (vx)((vz)(0 | 0) | 0) 

Instead, C[P] ijf since process C[P] can only perform the transition C[P] = (vx)(x(a) \ xb) (vx)(0 | 0) 
and become stuck in doing so. □ 

7r-calculus with pattern matching. This variant enriches TT-calculus by allowing input actions to use 
patterns of names to selectively synchronise with output actions along the same channel according to the 
offered tuples. Pattern matching was introduced in the context of 7T-calculus in |fl5l . but it is also used 
by several other process calculi, like e.g. those presented in |[T8l[T9l . A pattern is a sequence of names 
where some names are placeholders while some other ones are not and stand for themselves. We indicate 
these latter ones by operator r - n . Intuitively, a pattern x can match any tuple a having the same length 
obtained by instantiating the names in fn(x), where any name occurring in x is free but for those that 
are argument of operator r - n , thus, e.g., r x~ l a = r x~ l for any name x and substitution a. When the check 
if a pattern x and a tuple a match succeeds, it returns the least substitution a such that xa = a (once 
the occurrences of operator r - n in the left hand side have been removed). Thus, a process a(x).P and a 
process ab.Q can synchronise if, and only if, x and b match by generating some substitution a and, after 
the synchronisation, a(x).P becomes Pa. The operational semantics is defined by rules similar to those 
of 7r-calculus where objects of input and output actions are replaced by patterns and tuples, respectively, 
and the rule for input prefix checks possible matching tuples. 

Proposition 4.3 K-calculus with pattern matching is not strongly rep-free. 

Proof. Let C, / and P be as follows: C = (vx){x{a)._ \ xb), I = (Vz)(za \ zi^b^.yc) and P = 0. Process 
/ is invisible since it is blocked because the pattern r b~ l and the tuple a do not match (as names a and b 
are supposed to be different). However, we have that C[I] JJ-, in fact 

C[I] = {vx){x(a).(vz)(za | z{ r b^).yc) \ xb) {vx){(vz){zb \ z{ r b^).yc) \ 0) 
(vx)((vz)(0 | yc) | 0) (vx)((vz)(0 | 0) | 0) 

Instead, C[P] ]jf since process C[P] can only perform the transition C[P] = (vx)(x(a) | xb) (vx)(0 | 0) 
and become stuck in doing so. □ 



K MPM -calculus. As a consequence of Propositions 4.1 4.2 and 4.3 we have that the three variants of 
7r-calculus previously presented are strictly more expressive than ^-calculus, in other words there is no 
basic encoding from any of them into 7r-calculus. Now, we combine them to form a sort of super calculus, 
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that we call % MPM -calculus, corresponding to simultaneously adding match, polyadic synchronization and 
pattern matching to 7r-calculus. The syntax of n MPM -calculus is defined as 

P,Q ::= | li.P | P + Q \ P\Q \ {vn)P | \P | [n = m]P /J, ::= X | a(x) | an 

To save space, the presentation of the operational semantics of % MPM -calculus is relegated to 0. 

We now show that % MPM -calculus is weakly rep-free from which it follows that all the three variants 
of 7r-calculus we have considered in this section are weakly rep-free too. 

Theorem 4.1 % MPM -calculus is weakly rep-free. 

Proof (sketch). We prove that C[I] ^ m C[P], for every context C, closed invisible process / and process 
P. The thesis then follows by Proposition |37TJ2). Similarly to that of Lemma [3T| the proof is an easy 
induction on the structure of context C but replacing, respectively, subjects and objects of input and output 
actions with tuples and patterns, invisible processes with closed invisible processes, and by exploiting 
the fact that if / is a closed invisible process, then la is a closed invisible process too. □ 



5 Non replacement free calculi 

In this section we show that most of the calculi with some form of priority proposed in the literature, 
as e.g. those presented in m [271 ED [HI, we not re P~f ree - m process calculi, priority is one of the most 
widely studied, and natural, notions used to implement different levels of urgency between actions of (a 
system of) processes. According to the terminology of [11] (that surveys the different approaches taken 
in the literature), we consider both calculi with local priority (as e.g. CPG [27] and COWS [19]), and 
calculi with global priority (as e.g. BCCSP© ffl, CCS« and CCSP rio fHX ). 

The results presented in this section demonstrate that there exists no independence preserving basic 
encoding from any of the calculi with priority into, e.g., CCS or 71-calculus, or into any of the extensions 
of ^-calculus we have presented in Section [4] For each calculus we show that it is not rep-free by 
exhibiting a triple made of a context C, a closed invisible process / (usually the null process 0) and a 
process P such that condition (|2]) of Definition 2.6 is violated. 



For the sake of simplicity, the fragments of the calculi considered in this section will be slightly 
adapted and simplified to avoid, as much as possible, introducing further notations and complications. 

BCCSP©. BCCSP© (BCCSP with the priority operator 0, [1]) is the simpler calculus with priority 
analyzed in this paper. It is obtained by adding the well-known priority operator of H to the basic 
process algebra BCCSP OTll . An utterly simplified syntax of BCCSP© that, unlike the original one fl], 
does not allow action and process variables, is as follows 

P ::= | }X.P | P + P | 0(P) 

The priority operator gives certain actions priority over others based on an irreflexive partial ordering 
relation < over the set of actions. Intuitively, \i < \i' is interpreted as '/i' has priority over ;U'. Thus, 
for example, if P is some process that can initially perform both \i and \i' ', then ®(P) will not be able to 
initially execute ji.. That is, in the context of the priority operator 0, action ji. is preempted by action jx' . 

Proposition 5.1 BCCSP® is not rep-free. 

Proof. Let C, / and P be as follows: C = 0(a + _),/ = and P = T, with a < T. We have that C[I] JJ-, in 
factC[7] =0(a + O) can perform the transition 0(a + O) -^0(0). Instead, C[P] # since C[P] = (a + t) 
can only perform the transition 0(a + t) 0(0) and become stuck in doing so. □ 
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It is worth noticing that even such an extremely simple calculus with priority cannot be properly 
encoded into any rep-free calculus. 

CPG. CPG (CCS with Priority Guards, (271) is an extension of CCS allowing processes with priority 
guards, i.e. terms of the form S : p.P, where S is some finite set of visible actions, which behave like p.P 
except that action p. can only be performed if the environment does not offer any action in S = {n | n G S}. 
The syntax of the calculus is as follows 

P ::= | LiaSi-.Hi.Pi | P[f] | P\L \ P\Q \ A( ai ,...,a n ) 

CPG builds on a variant of CCS where the choices are guarded and parameterized process definitions are 
used in place of recursion for modelling infinite behaviours. 

A transition can be conditional on offers from the environment. Consider {a} :b\b. It can make a 
computation step due to the synchronization between b and b. However b is guarded by a, and so the 
computation step is conditional on the environment not offering a. This is reflected by letting transitions 

be parameterised on labels of the form S : p. The intended meaning of P > P' is that P can perform 
action p, and become P' in doing so, as long as the environment does not offer a for any a G S. 

Proposition 5.2 CPG is not rep-free. 

Proof. Let C, / and P be as follows: C=({a + {a} : b.c) \ b \ _)\{a,b}, I = and P = a. We have that 

C[I] ^ in fact C[I] = {(a + {a}: b.c) | b | 0)\{a,b} — > (c | | 0)\{a,b} (0 | | 0)\{a,b}, 
where : c is visible while {a} : % is not. Instead, C[P] $ since process C[P] can only perform the 

— 0"T — 

transition C[P] = ((a + {a} : b.c) \ b \ a)\{a,b} — '■ — > (0 | b \ 0)\{a,b} labelled by the invisible action 
: T and become stuck in doing so. □ 

The semantics of the fragment of CPG where the only allowed priority guarded processes are of the 
form : p.P coincides with that of CCS. Hence, CPG is somehow more expressive than CCS. In Il27ll33l 
it is also argued that expressiveness of CPG and 7r-calculus is not comparable. 

CCS S « and CCS prio . CCS sg (CCS with static priority and global preemption, O]) is an extension of 
CCS where channels have priority levels and only complementary actions at the same level of priority 
can engage in a communication. A notion of preemption then stipulates that a process cannot engage in 
transitions labelled by actions with a given priority whenever it is able to perform a transition labelled by 
an internal action of a higher priority. In this case, we say that the lower-priority transition is preempted 
by the higher-priority internal transition. Therefore, visible actions never have preemptive power over 
actions of lower priority because visible actions only indicate the potential for execution. For simplicity, 
we consider just two priority levels: ordinary actions and higher priority, underlined actions. The syntax 
of CCS sg is then the same as that of CCS, except for actions that can also be underlined. 

When restricting only to unprioritized (or only to prioritized) actions, the transition rules of CCS ig 
are exactly the ones of CCS. When both prioritized and unprioritized actions may be involved, an unpri- 
oritized action is allowed only if no prioritized invisible action can be executed. 

CCS pno ifTTll extends CCS 4 ^ with two operators, originally introduced in |[T0l , which correspond to 
the prioritization of a visible unprioritized action, written P\p, and to the deprioritisation of a visible 
prioritized action, written P[p. 

Proposition 5.3 CCS sg and CCS prio are not rep-free. 



Proof. The proof for CCS ig trivially follows from Example 2.2 To prove the statement for CCS pno it is 



sufficient to take C = ((a \ _)\{a} +b) \b and proceed similarly to the previous case. □ 
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Proposition 5.3 permits to conclude that there exist no basic encodings of CCS vg into CCS. Since the 
fragment of CCS S? not containing prioritized actions coincides with CCS, and the identity encoding is a 
basic encoding of CCS into CCS sg , we obtain that CCS sg is strictly more expressive than CCS. 

COWS. COWS (Calculus for Orchestration of Web Services, |[T9l ) is a recent formalism specifically 
devised for modelling service-oriented systems which integrates primitives of well-known process cal- 
culi (e.g. 7T-calculus) with constructs meant to model web services orchestration (e.g. communication 
endpoints and forced termination). COWS is equipped with a priority mechanism that assigns actions 
for forcing immediate termination of concurrent processes greatest priority within their enclosing scope. 
This way, when a fault arises in a scope, (some of) the remaining processes of the enclosing scope can 
be terminated before starting the execution of the relative fault handler. 

Due to space limitations, we consider here only the very simple fragment of the original calculus 
(without replication/choice/protection operators) generated by the following syntax 

P,Q ::= | kill(fc) | an | a(x).P \ [k]P \ P\Q 

In addition to the set of names, we assume existence of a disjoint set of killer labels, ranged over by K. 
They can be used for introducing a named scope for grouping certain processes. Being different from 
names, killer labels cannot be exchanged in communications, thus their scope is statically regulated by 
the delimitation operator [k]P. 

We comment on the two novel operators, namely kill and delimitation, kill(fc) causes immediate 
termination of all concurrent processes inside an enclosing [k] , that stops the killing effect by turning the 
transition label K into x. Execution of parallel processes is interleaved, but when a kill can be performed. 
In fact, kill is executed eagerly with respect to the processes enclosed within the delimitation of the 
corresponding killer label. 

Proposition 5.4 COWS is not rep-free. 

Proof. Let C,I and/ 5 be as follows: C=[k](_ | an), / = and P = kill(fc). We have that C[I] JJ-, in fact 
C[I] = [k] (0 I an) a " > [k] (0 | 0). Instead, C[P] $ since process C[P] can only perform the transition 
C[P] = [k] (kill(x:) | an) [k] (0 | 0) and become stuck in doing so. □ 



6 Concluding remarks and related work 

To sum up, a first contribution of this paper is the introduction of a metatheory based on the replacement 
freeness criterion and on the notion of basic (possibly, independence preserving) encodings that provides 
a method to tell process calculi apart. Our approach is general and uniform enough to permit comparing 
the relative expressive power of quite different process calculi. On the contrary, many works on the 
subject only focus on variants of the same calculus. A second contribution consists in presenting a 
number of results coming from the application of our metatheory to well-known process calculi that 
are possibly extensions of CCS or Ti-calculus. We thus end up to retrieve separation results similar to, 
e.g., lfT6l [TBI , but ours are stronger since they hold for a more general class of encodings, or to, e.g., 
HJ |27l |33l, but here they follow by possibly simpler proofs. Finally, some other results, e.g. some of 
those for non rep-free calculi presented in Section|5] as far as we know, are pointed out for the first time. 

Related work. Defining an encoding of a process calculus into another one and analysing the proper- 
ties of the encoding function, or proving that such an encoding cannot exist, is a widely adopted approach 
for studying the relative expressive power of process calculi. This is an effective approach that aims at 
comparing the calculi just on the basis of their semantic differences, i.e. without resorting to any specific 
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problem (e.g. the 'leader election' problem considered in lfT2l |25l |28l |34l l27l |29l |33"1 ). However, the 
significance of the obtained results is subordinated to the properties that the encodings are required to 
enjoy, i.e. to the classes of encodings. 

The most closely related works are lPT5l . that introduces the class of reasonable encodings for com- 
paring several communication primitives in the context of 7i-calculus, and lfT6l . that introduces the class 
of valid encodings for comparing many variants of CCS, 7i-calculus and Ambient calculus [9]. Our basic 
encodings generalise the reasonable encodings, the former ones being obtained from the latter ones by 
dropping the conditions on name invariance, operational correspondence and divergence preservation 
and reflection. Similarly, our basic encodings generalise the valid encodings by dropping the conditions 
on name invariance, operational correspondence and divergence reflection. Indeed, success sensitiveness 
of |[T6l implies our interaction sensitiveness requirement: appropriate observers can be defined that test 
the capability of a process to interact with the environment and report success only in that case. In fact, 
lfI31[T6l aim at identifying suitable criteria for both encodability and separation results, thus the consid- 
ered encodings are the outcome of a compromise between 'maximality' (typical of encodability results) 
and 'minimality' (typical of separation results), while we are only interested to separation results and the 
weaker the requirements on the encodings, the stronger the results. Moreover, we additionally consider 
process calculi with priority, thus we end up establishing different separation results. 

In fact, we impose somewhat coarser demands on our encodings than those usually found in the lit- 
erature. For example, we don't require operational correspondence (as instead done in e.g. ll32"l[T5l[T6lO . 
observational correspondence or full abstraction (as instead done in e.g. lfl4l l24l [T3l ). and in place of 
homomorphism (of e.g. parallel composition as required in |[8][25][32l[22l) we simply require composi- 
tionality. In particular, the requirement of homomorphy for parallel composition (also called distribution 
preservation) entails that the encoding preserves the distribution of a term into parallel components 
exactly, i.e. without introducing any sort of coordinating context that would reduce the degree of dis- 
tribution. This requirement has been sometimes criticized and indeed there exist encodings that do not 
translate parallel composition homomorphically (see e.g. Il22"l l5l0. Moreover, it is quite strong when com- 
pared to the requirement of compositionality, imposed to ours basic encodings, that only implies that any 
context in the source calculus can be represented as a context in the target calculus. Compositionality is 
a very natural property and, indeed, every encoding we are aware of is defined compositionally. 

Distribution preservation has been used as a requirement (for the encodings) in [27, 33] for sepa- 
rating CPG from both CCS and 7T-calculus, thus obtaining results similar to our Proposition |5.2| It is 
a requirement for the class of uniform encodings (that, other than distribution, are required to preserve 
renaming, i.e. to respect permutation of free names) introduced in ll25ll for comparing the expressive 
power of synchronous and asynchronous versions of the 7r-calculus, which instead our criteria do not 
allow to separate. In fact, with a proof similar to, but simpler than, that of Theorem 3.2 we can show 
that asynchronous 7i-calculus [2] is rep-free as well. An even stronger class of encodings is used in [8] to 
establish some separation results for variants of 7i-calculus. Among these results, the authors prove that 
match and polyadic synchronization cannot be encoded in 7T-calculus, which are similar to the separation 
results we present in Section |4] Distribution preservation is also required for the encodings considered 
in (291, where expressiveness of different variants of Ambient calculus is analysed, and in ll32l . where 
an extension of the 7i-calculus with both polyadic synchronization and priority is introduced and used as 
target of 'reasonable' encodings of a few bio-inspired process calculi. 

For some of the calculi with priority considered in this paper, there are already some separation re- 
sults with respect to calculi without priority (see, e.g., IT331 l27l ). However, these results are given by 
considering either a less expressive fragment of CCS as the target calculus or a strict class of encod- 
ings, typically uniform encodings. In fact, distribution preservation seems even more restrictive when 
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calculi with priority mechanisms are involved. Indeed, priority alters the very basic notion of distributed 
computation, since in calculi with priority it is possible to know in advance if a process is not ready to 
perform some synchronisation ||3"3l , which is instead not decidable in calculi without priority. It seems 
then too demanding to require that the parallel operator of a calculus with priority exactly maps to the 
corresponding operator of a calculus without priority. 

In the authors consider some syntactic variants of CCS with replication in place of recursion 
and study the expressiveness of restriction and its interplay with replication. They also enrich one of 
these variants with priority guards 11271 and conclude that priority adds expressivity to this variant of the 
calculus. As comparison criteria they consider decidability of convergence and relative expressiveness 
with respect to a well-known observational semantics, i.e. failure semantics. Differently, we consider 
CCS and its extension CPG and do not rely on any observational semantics. 

Future work. For space limitation, in this paper we considered a subset of the calculi dealt with in 
l6l . We intend to apply our metatheory to more process calculi, as e.g. Psi-calculi Q, that have al- 
ready turn out to be quite expressive, and the prioritised variant of 7r-calculus introduced in 11321 . Other 
more challenging applications, that might require an appropriate tuning of our metatheory, concern pro- 
cess calculi with communication mechanisms different from those considered in this paper, as e.g. the 
broadcast variant of 7i-calculus considered in ||34l . Ambient calculus and higher order TT-calculus 11301 . 
Moreover, we also plan to investigate the impact of loosening the requirement of preserving name inde- 
pendence. Indeed, although the requirement is used in many classes of encodings (as e.g. those used in 
Il25ll34ll27l[33l '). it leaves out of our study all those encodings that exploit some kind of reserved names 
for rendering specific primitives and operators of the source calculus. In this case, the encodings of inde- 
pendent processes might end up not to be independent. Examples of such encodings can be found, e.g., 
in lfT5l[T7l . This may also lead to weakening the demand of compositionality for allowing the encoding 
of a process of the source language to be defined by combining the encodings of its subprocesses through 
a single outermost context that coordinates their inter-relationships. 

Acknowledgements. We thank Daniele Gorla and the anonymous reviewers for their fruitful com- 
ments that have helped us in improving the paper. 
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